Glossary

A

administrator account

Account used to log on to Windows 2000 by users to create
service accounts, install Microsoft Operations Manager 2005
components, and have access to the MOM Administrator console.
Administrators are members of the Administrators group and have
full control over the domain or computer.

Administrator Console

Interface based on Microsoft Management Console (MMC)
technology, used for monitoring and event management. Can include
the Microsoft Operations Manager 2005 Information Center,
Operations, Management Packs, and Administration snap-ins.

agent

Service that runs on every computer you want to monitor. An
agent captures information from the computer on which it is
running. An agent applies predefined rules to the captured data and
performs actions as defined by the rules.

alert

An indication of a significant event. Alerts are defined by
rules.

alert rule

Rule that specifies one response for a number of previously
defined alerts.

alert severity

Property of an alert indicating its seriousness. Examples
include Service Unavailable, Security Issue, Critical Error, Error,
Warning, Information, and Success.

alert view

Window that displays specified alerts in the management
group.

attribute

Computer characteristic, typically defined by a Registry key or
value.

attribute view

Window that displays specified computer attributes in the
management group.

B

Boolean regular expressions

Search criteria for text pattern matching that allow you to
combine regular expressions using the Boolean operators
and,
or, and
not.

C

command bar

In the Operator Console, a set of tool bar icons specific to
the view selected (Alerts, State, etc.).

company knowledge

Information you add to alerts or rules about resolving the
indicated condition.

component

Individual part of the product: agent, server, Data Access
Server (DAS), or database.

computer group

Collection of computers with some attribute in common. Computer
groups are defined by computer grouping rules for similar event
management.

computer group filter

In the Operator Console, a drop-down list of filters that limit
the number of computers shown.

computer group view

Window that displays specified computer groups in the
management group.

computer grouping rule

Rule that combines computers with common attributes into a
group to be similarly managed and monitored.

computer view

Window that displays specified computers in the management
group.

computer rule formula

Regular expression or wildcards used to create a computer
grouping rule. For example:

Windows_Version = 2000 AND (MSMQ_Installed)

.

conditional filter

Filter that allows Microsoft Operations Manager 2000 to
evaluate further rules, but does not insert events into the
database unless another rule match occurs.

console scope

In the Operator Console, defines a set of computer groups for
individual MOM 2005 users. A console scope limits the user to
seeing only those computers that are in the computer groups
associated with the console scope.

consolidation rule

Rule for grouping multiple events from a computer into a single
summary event.

D

Data Access Server (DAS)

Component that receives events from the MOM Servers and inserts
them into the database. Requests for data from the database and
requests to insert data into the database typically go through the
DAS.

Feature that combines multiple identical alerts within a
specified period of time into one alert.

E

event

Any significant occurrence in the system or an application that
requires a user to be notified or an entry to be added to a log.
Microsoft Operations Manager 2000 monitors events logged in
Windows 2000 event logs and other application logs, among
others.

event consolidation

Combines multiple events into one event. The single event
identifies the number of consolidated events and when the first and
last consolidated events occurred.

event rule

Rule for generating an alert when specific events occur.

event view

Window that displays specified events in the management
group.

F

filter

See
filtering rule.

filtering rule

Rule for excluding an event, alert, or performance data from
some or all processing by Microsoft Operations Manager 2000.
Types of filters include pre-filters, conditional filters, and
database filters.

forwarding

See
alert forwarding.

G

No Glossary entries.

H

heartbeat

Periodic pulse from the agent that contains information related
to its viability. The heartbeat also informs the MOM Server of the
current rules evaluated by the agent, requesting updates if
necessary.

I

Information Center

Interface that provides access to areas of MOM, including
Microsoft Operations Manager Web, Downloads and Updates, and
Documentation.

J

No Glossary entries.

K

Knowledge Base

See product knowledge

L

No Glossary entries.

M

Managed Computers list

List of computers matching the Managed Computer rule for an
Agent Manager.

Managed Computer rule

Rule that specifies the computers on which an Agent Manager is
responsible for installing and uninstalling agents.

Management Group

Group of computers containing the following Microsoft
Operations Manager 2005 components: one database, one or more
Data Access Servers, one or more MOM Server, and one or more
agents.

Sampled numeric data compared to a threshold value. Microsoft
Operations Manager 2005 generates an alert if the threshold is
crossed in either direction.

pre-filter

Filter that excludes an event from further processing by
Microsoft Operations Manager 2005. The event is not inserted
in the database.

private view

A view that is accessible only by the user who created it, and
is saved in the My Views folder.

product knowledge

A collection of rule comments that embodies knowledge about the
meaning and importance of events.
Product Knowledgecontains predefined information
from Microsoft.
Company Knowledgecontains information entered by the Microsoft Operations
Manager 2005 user.

provider

Source of information collected by Microsoft Operations
Manager 2005. Providers include system event logs and
performance counters, among others.

public view

A view that is accessible by anyone, and is saved in the All
Public Views folder.

Q

No Glossary entries.

R

Interface to the database that allows you to generate reports,
including specific security auditing and general system monitoring
reports, and graphs useful for capacity planning or performance
analysis.

resolution history

Microsoft Operations Manager 2005 automatically tracks
changes to alert fields. You can also enter your own information
about an alert.

resolution state

Status in the cycle of resolving alerts. Default resolution
states include New, Acknowledged, and Resolved, among others.

response

Action that Microsoft Operations Manager 2005 initiates
when a rule match occurs. Notifications, command or batch files,
scripts, and SNMP traps are examples of possible responses.
Responses that occur on the MOM Server computer are
central responses. Responses that occur on the agent
computer are
local responses.

rule

Method of grouping computers or identifying data to collect.
Rules an define a collection of computers for similar event
management. Rules can also define the events, alerts, and
performance data to collect, what to do with the information once
it is collected, and how to respond to the indicated
condition.

rule group

Set of rules grouped together with a single name. Grouping
rules together allows you to associate more than one rule with a
computer group.

rule match

Occurs when Microsoft Operations Manager 2005 receives
information that matches a rule. When a rule match occurs, the
product performs the actions and response defined in that
rule.

S

script

Simple program that can be added to a rule as a response, or
used as an extension to the event criteria definition.

service level agreement time

The amount of time an alert can remain in an alert resolution
state before it becomes a service level exception.

service level exception

An alert that has remained longer than specified in a
resolution state. For example, the default service expectation time
for an alert to remain in the New resolution state is 10 minutes.
If an alert's resolution state is New for longer than 10 minutes,
it is considered a service level exception.